
Error: rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier: K/H4/9M/fjGEwzqU0Dn3A8XPk50ffROcxb64M887Al4=
Subject key identifier: C9:94:A8:1A:CA:7E:AD:9B:27:90:E1:93:36:E2:06:AB:A6:44:F9:C6
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer: /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial: 0182
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number: 017F
Signing time: Fri 25 Sep 2026 05:09:43 +0000
Manifest this update: Fri 25 Sep 2026 05:09:42 +0000
Manifest next update: Sun 27 Sep 2026 05:09:42 +0000
Files and hashes: 1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: 0/SYDXDhqRkHLjOtIbMUtJvlw9IgRoqHWyynUvMJhwk=)
2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 05:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Validity
Not Before: Sep 25 05:09:42 2026 GMT
Not After : Sep 27 05:09:42 2026 GMT
Subject: CN=6ab60217-0a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:69:9b:18:45:1d:54:fa:44:18:34:9f:9a:
f0:1f:d9:c5:1e:95:dc:aa:2d:fb:5a:33:81:42:83:
01:7c:ee:95:41:a8:01:18:fb:c1:5f:80:cc:f5:e4:
68:e9:90:11:4f:fd:3e:9f:74:20:53:3e:26:8c:a3:
6a:00:f5:ef:47:69:85:92:0c:be:d8:9d:65:62:f0:
84:21:88:01:d1:41:f1:a4:33:10:a8:6f:f8:11:20:
c6:7d:1f:33:a4:b9:a0:bf:51:9a:34:e0:da:55:e8:
1c:ca:4d:41:19:db:fd:4e:e1:70:1e:0f:2e:53:b7:
da:db:dc:77:63:c0:2f:40:80:5a:90:66:3c:d0:6f:
80:50:4d:ff:3a:7f:f3:ad:e9:d9:1a:19:e1:43:27:
6f:00:dc:fb:8b:4f:41:80:8b:97:8d:bd:3b:2c:1a:
43:ec:17:58:45:f4:de:71:e7:49:bd:bc:ff:57:22:
fc:74:5e:48:70:2d:e4:01:26:45:7b:7b:b0:84:b7:
3c:17:9b:47:8b:53:3a:4d:7c:30:c1:72:09:72:ba:
3f:92:66:a5:04:22:03:9d:9f:cd:20:5e:22:bf:ad:
66:8c:f7:55:67:c6:24:5b:44:29:c9:4b:e8:98:ec:
bf:34:4e:fc:fd:31:e7:5f:e1:d5:2c:6a:3a:ca:e9:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:A8:1A:CA:7E:AD:9B:27:90:E1:93:36:E2:06:AB:A6:44:F9:C6
X509v3 Authority Key Identifier:
keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:84:2c:b1:9e:98:9f:8b:fd:a5:c0:e5:23:60:cc:de:62:46:
7d:9d:ad:e2:26:5a:c2:d8:09:cf:4e:d6:28:f1:25:ca:48:64:
4c:05:39:ba:98:bc:35:4f:c1:f9:97:5c:04:a5:7f:25:25:74:
8c:78:0b:32:fc:37:d4:8b:23:aa:df:9c:05:bd:a4:2b:e6:58:
ac:29:e6:15:3c:cd:5a:a5:25:05:00:ae:b9:43:8d:fa:bc:2f:
a1:da:fb:68:e4:3b:b9:b0:b8:e5:d2:e8:b3:2b:b2:cc:15:a5:
66:ed:45:66:e5:79:e4:9e:0d:df:d2:e9:23:e3:39:0c:70:e5:
2c:67:3c:cc:25:e3:c9:27:f0:39:9c:ba:ea:8f:ca:cf:93:ba:
70:90:74:b7:1f:0b:8c:22:0e:f5:34:e9:9e:f9:89:8e:7d:43:
45:fb:14:1a:bb:31:e4:38:6e:57:71:df:1d:a3:ed:e7:16:94:
ae:19:1f:af:ec:ed:f0:04:c2:b3:b0:68:77:18:33:5a:54:1e:
0b:92:f2:6a:de:76:91:bf:49:63:41:be:dc:69:15:0a:03:43:
f9:bd:8f:91:21:36:0c:09:01:54:54:7b:3e:d8:86:85:94:63:
54:f4:44:1e:9c:f6:f9:c5:a6:68:ef:b1:92:91:e5:40:a4:1f:
88:3d:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:48 2026 by rpki-client